Free Website Security Check
Run the tool below for a quick outside-in view. It does not log in, change your site or claim to find every weakness.
Free website security check
Type your website address. In seconds you see what any visitor can see about its security.
What each check means
Certificate and HTTPS redirect: confirm the connection is encrypted and visitors are sent to the secure address.
HSTS: asks browsers to prefer HTTPS. Nosniff: reduces content-type guessing. Framing protection: helps prevent your pages being embedded for clickjacking.
Content-Security-Policy: can restrict where scripts and other resources load from. Version banner: checks whether server software advertises details that help attackers fingerprint it.
Sign-in cookie flags: checks whether authentication cookies request protections such as Secure, HttpOnly and SameSite. SPF and DMARC: are email-domain controls that help receiving mail systems evaluate messages claiming to come from your domain.
Frequently asked questions
Does the check change my website?
No. It makes outside-in requests and reports what your website sends back.
Does a clean result mean the site is secure?
No. This is a short check of common signals, not a penetration test or audit.
Can I monitor the site afterwards?
Yes. Sentinel can monitor the site continuously and send alerts when checks fail.